I have an MVP that I'm pretty proud of and I'm ready to release a beta, but for some reason I'm shy to release it. That doesn't make a whole lotta sense.
macos
Vivaldi 7.7 has arrived! 🎨
✅ All your tabs, structured, anywhere you need them
✅ Unified Start Page layout
✅ Brand new performance controls
✅ Privacy Dashboard redesigned
✅ Refined Mail panel
More on the update: https://vivaldi.com/blog/vivaldi-on-desktop-7-7/
#Browser #Web #Vivaldi #Browsers #App #Linux #Windows #macOS
uninstall Ghostty, ane bosan kudu benerin TERM setiap ganti server untuk SSH. Buang - buang waktu. Nanti saja kalo sudah stabil.
sementara balik dulu ke Wezterm https://wezterm.org/
Found on /r/microsoftsucks #microsoft #windows #macos #linux #ubuntu #os
Takahe has limited support for this type: See Original Page
#Macstodon now runs in the latest bleeding-edge build of the Snow emulator! And if you use Snow's built-in HTTPS stripping, then you don't have to configure WebOne or another proxy, just install Macstodon and start using it 😎
Thanks @twvd for the FPU fixes and all the other hard work you put into Snow! This is the kick-in-the-pants I need to get the next version of Macstodon out the door 🙂
#RetroComputing #RetroProgramming #VintageMac #68K #PowerPC #Apple #Mac #MacOS #ClassicMac
Developers, please be careful when installing Homebrew. Google is serving sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site.
Note: Google allows the ad sponsors to specify an URL that will be displayed on the ad (original brew.sh here), but the click takes you to the malware domain brewe.sh.
#Apple #HomeBrew #Google #MacOS
❤️ With all the installations on #GNU/#Linux (servers, vms, desktop, ... ), #BSD and #Unix systems, #MacOS, #Microsoft #Windows and WLS) I feel comfortable to claim there or way more than 1 billion installations of Vi*; often without people knowing about it.❤️
❤️ Thank you Bram Moolenaar, Christian Brabandt, the whole #Vim community, and all the people from projects like #NeoVIM, #Nvi, #Busybox #Vi, who develop and maintain their #vim flavour. ❤️
https://k7r.eu/thank-you-for-the-editor-of-the-beast/ ❤️ #ilovefs ❤️
I submitted a Pull Request to update MacPorts' OpenSSH to 9.9p2 here:
https://github.com/macports/macports-ports/pull/27712
GitHub Continuous Integration checks are running. Hopefully they will be OK (Update 2 out of 3 have completed successfully, which is a good sign).
I tested locally without issues, but I also build against LibreSSL locally, whereas GitHub CI and MacPorts' Build Bots I think default to OpenSSL.
This release is to address some vulnerabilities identified by Qualys and other less critical bugs.
More details from upstream here:
https://www.openssh.com/releasenotes.html#9.9p2
Of particular note:
" Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
(inclusive) contained a logic error that allowed an on-path
attacker (a.k.a MITM) to impersonate any server when the
VerifyHostKeyDNS option is enabled. This option is off by default.
* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
(inclusive) is vulnerable to a memory/CPU denial-of-service related
to the handling of SSH2MSGPING packets. This condition may be
mitigated using the existing PerSourcePenalties feature.
Both vulnerabilities were discovered and demonstrated to be exploitable
by the Qualys Security Advisory team. We thank them for their detailed
review of OpenSSH."
If I read everything correctly, these vulnerabilities primarily only impact the Portable OpenSSH releases (which is what MacPorts uses). However, OpenBSD has also issued the following errata to mitigate one of the issues as it also appears to impact OpenBSD users:
"008: SECURITY FIX: February 18, 2025 All architectures
sshd(8) denial of service relating to SSH2MSGPING handling. ssh(1) server impersonation when VerifyHostKeyDNS enabled.
A source code patch exists which remedies this problem."
Source code patch for OpenBSD here:
https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/008_ssh.patch.sig
Having written as much, it appears as if the main OpenSSH version for OpenBSD is still 9.9, so I am not going to make a submission for undeadly.org Other editors reading this are welcome to though, I just kind of have a lot of other stuff on my plate at present.
As usual, I also have too much going on in my life to want more responsibilities such as commit access within MacPorts, so it's up to someone else to merge it.
Update #2: I also decided to be a good Samaritan and reported the issue to Apple. Not that they have ever acknowledged my efforts for such things nor paid me from their bug bounty program in years of doing similar things. Because, OFC, Apple can't spare a penny to anyone like me. Maybe Qualys already reported it to them anyway (though they would have no obligation to do so, they did find the vulns and reported them upstream as would be expected).
#OpenSSH #MacPorts #SecureShell #InfoSec #Cryptography #Security #CVE #PatchTuesday #OpenSource #OpenBSD #macOS
https://github.com/macports/macports-ports/pull/27712
GitHub Continuous Integration checks are running. Hopefully they will be OK (Update 2 out of 3 have completed successfully, which is a good sign).
I tested locally without issues, but I also build against LibreSSL locally, whereas GitHub CI and MacPorts' Build Bots I think default to OpenSSL.
This release is to address some vulnerabilities identified by Qualys and other less critical bugs.
More details from upstream here:
https://www.openssh.com/releasenotes.html#9.9p2
Of particular note:
" Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
(inclusive) contained a logic error that allowed an on-path
attacker (a.k.a MITM) to impersonate any server when the
VerifyHostKeyDNS option is enabled. This option is off by default.
* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
(inclusive) is vulnerable to a memory/CPU denial-of-service related
to the handling of SSH2MSGPING packets. This condition may be
mitigated using the existing PerSourcePenalties feature.
Both vulnerabilities were discovered and demonstrated to be exploitable
by the Qualys Security Advisory team. We thank them for their detailed
review of OpenSSH."
If I read everything correctly, these vulnerabilities primarily only impact the Portable OpenSSH releases (which is what MacPorts uses). However, OpenBSD has also issued the following errata to mitigate one of the issues as it also appears to impact OpenBSD users:
"008: SECURITY FIX: February 18, 2025 All architectures
sshd(8) denial of service relating to SSH2MSGPING handling. ssh(1) server impersonation when VerifyHostKeyDNS enabled.
A source code patch exists which remedies this problem."
Source code patch for OpenBSD here:
https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/008_ssh.patch.sig
Having written as much, it appears as if the main OpenSSH version for OpenBSD is still 9.9, so I am not going to make a submission for undeadly.org Other editors reading this are welcome to though, I just kind of have a lot of other stuff on my plate at present.
As usual, I also have too much going on in my life to want more responsibilities such as commit access within MacPorts, so it's up to someone else to merge it.
Update #2: I also decided to be a good Samaritan and reported the issue to Apple. Not that they have ever acknowledged my efforts for such things nor paid me from their bug bounty program in years of doing similar things. Because, OFC, Apple can't spare a penny to anyone like me. Maybe Qualys already reported it to them anyway (though they would have no obligation to do so, they did find the vulns and reported them upstream as would be expected).
#OpenSSH #MacPorts #SecureShell #InfoSec #Cryptography #Security #CVE #PatchTuesday #OpenSource #OpenBSD #macOS
Edited 364d ago
It seems like most every other browser is all in on AI. We have chosen a different path at @Vivaldi
If you would prefer AI not to be integrated into your browser, but still like a feature rich browser, I welcome you to try Vivaldi.
https://vivaldi.com/blog/keep-exploring/
#vivaldi #AI #LLM #browser #firefox #Mozilla #Linux #windows #Macos
Does anyone know of a MacOS (Ventura) app I can have on my own hard drive that doesn't cost a fortune, that will allow me to download YouTube and other online videos? Something for regular ol' people, not programmers/scripters? No git hub?
An org I spoke for put the video up, but did not give me a copy so I'd like to download it.
I used to use Softorino's YT downloader, which I PAID for, but then they decided to go SaaS and iced out all their paid users who got it before.#AskFedi #MacOS
Edited 7d ago
🎵 ✨ Beautifully minimal, delightfully intuitive.
The folks at Open Planet Software entrusted us with Sessions’ UI design. For musicians who need all their virtual instruments at their fingertips, this carefully crafted user experience keeps the focus on what matters: the freedom to explore, create, play, and perform. Need UX help? Get in touch. https://iconfactory.com #Ux #UIDesign #IconDesign #macOS #dev
Mac tip: If you can’t remember where a command is in the menu bar:
❶ Use Shift+⌘+/ (question mark) to get the Help menu.
❷ Type a few letters until you see the command you want.
❸ Arrow down to it and trigger with Return.
➜ You also get to see where the command is located for the next time.
#macOS
A good critique of MacOS new menu icons https://tonsky.me/blog/tahoe-icons/
It highlights @scottjenson 's point from https://youtu.be/1fZTOjd_bOQ?si=eBP04-Yp3Z1Qf_Wm on how desktop UX keeps getting worse, not better.
I guess my macOS Music library database got partially corrupted, which is why album art wouldn't load or take effect and why the smart playlists stopped updating.
I was able to export most of my playlists as XML files, created a new Music library, import the playlist XML files, and everything is working again.
My M1 Max MBP is now back with a clean install of Tahoe and the new Music library loading up just fine. Since all of my music is on a NAS, I also had to manually grant the Music app full disk access; otherwise, it would fail to play anything. 🤦🏼
Looking forward to putting Fedora Asahi Remix back on there.
Edited 38d ago
is there a macOS application that can do basic audio routing/mixing? e.g., mix these inputs and send the audio to this output, then send this other input to a different output. something like Cantabile (for Windows), if anyone knows that.
at the moment i use Logic to do this, but it's rather overkill for something this basic.
I submitted a Pull Request to update MacPorts' signify to 1.62 here:
https://github.com/macports/macports-ports/pull/31080
GitHub Continuous Integration checks queued.
Hopefully they will run without issue?
If so, it's up to someone else with commit access to merge it.
This isn't very significant from the last PR I submitted from late October 2025 (upstream has a commit from early September 2025 so I am trailing by many months with this one) however, remarkable to me:
MacPorts' signify's version is now in alignment with upstream's versioning!
Yay!
I have no idea if that was true previously? My guess is: no, since I think jpouellet/Jean-Philippe Ouellet branched that out a long time ago and seemed to have iterated version tags haphazardly? Maybe I am mistaken though! There's a completely different Linuxism fork of signify which seems to have evolved (and versioned) very differently too.
That in particular has confused me with spurious repology.org out of date error messages for many months. I dunno if it has confused others, or if this version sync will make things less confusing, but hopefully? It makes things less confusing for me at least.
In tangential news, since I saw tedu in the man page, someone was wondering where he got off to a while ago and I don't think I saw a response. Hopefully he's doin OK? Please?
#signify #MacPorts #macOS #OpenSource #OpenBSD #cryptography
https://github.com/macports/macports-ports/pull/31080
GitHub Continuous Integration checks queued.
Hopefully they will run without issue?
If so, it's up to someone else with commit access to merge it.
This isn't very significant from the last PR I submitted from late October 2025 (upstream has a commit from early September 2025 so I am trailing by many months with this one) however, remarkable to me:
MacPorts' signify's version is now in alignment with upstream's versioning!
Yay!
I have no idea if that was true previously? My guess is: no, since I think jpouellet/Jean-Philippe Ouellet branched that out a long time ago and seemed to have iterated version tags haphazardly? Maybe I am mistaken though! There's a completely different Linuxism fork of signify which seems to have evolved (and versioned) very differently too.
That in particular has confused me with spurious repology.org out of date error messages for many months. I dunno if it has confused others, or if this version sync will make things less confusing, but hopefully? It makes things less confusing for me at least.
In tangential news, since I saw tedu in the man page, someone was wondering where he got off to a while ago and I don't think I saw a response. Hopefully he's doin OK? Please?
#signify #MacPorts #macOS #OpenSource #OpenBSD #cryptography
Are there any good alternative mastodon-clients to mona and tweesecake, which are both screen-reader accessible and work on mac?
I know enafore is a thing, but I don't like that one very much, due to it being browser-based and very limited in its features.
#accessible #accessibility #blind #fediverse #mastodon #macos